Canopy Privacy Policy
Last updated: August 7, 2023

Canopy Tax, Inc. (“Canopy,” “we,” or “us”) respects your privacy. This Privacy Policy describes the types of information we may collect from you when you visit our website at www.getcanopy.com, canopytax.com, or clientportal.com, any subdomain of any of the foregoing, or any related mobile or desktop applications, including any content or functionality offered on or through any of the foregoing (the “Site”), or when you access or use the services we make available on the Site (collectively, the “Service”), whether as a guest, a registered user, or a client of a registered user. This Privacy Policy also describes our practices for collecting, using, maintaining, protecting, and disclosing such information.

This Privacy Policy applies to information we collect on the Site, in email, text, or other electronic messages between you and the Site, and through your access to or use of the Service through the Site. It does not apply to information collected by us offline or through any other means, including on any other website operated by us or any third party, nor to information collected by any other third party, including through any application or content (including advertising) that may link to or be accessible from or on the Site or Service.

Please read this Privacy Policy carefully before you start to use the Site or Service to understand our policies and practices regarding how we treat your information. By accessing or using the Site or Service or by accepting (including by clicking to accept or agree when the option is made available to you) any Canopy terms and conditions that incorporate this Privacy Policy, you accept and agree to be bound and abide by this Privacy Policy. If you do not agree with any terms of this Privacy Policy, you may not access or use the Site or Service for any purpose.

This Privacy Policy may change from time to time (see Updates to Our Privacy Policy, below). Your continued use of the Site or Service after we make changes is deemed to be acceptance of those changes, so please check the policy periodically for updates.

Information We Collect

When you access the Site or use the Service, we collect certain information about you.  This may include information:

  • by which you may be personally identified, such as name, postal address, e-mail address, or telephone number ("personal information");
  • that is about you but individually does not identify you, such as your employer/affiliated organization name; and/or
  • about your internet connection, the equipment you use to access the Site or Service, and usage details.

We collect this information from various sources, such as directly from you when you access or use the Site or Service, from other users acting on your behalf (for example, where your service provider is a registered user of the Service and provides such information to us in connection with his or her use of the Service), or automatically as you navigate through the Site or Service. Information collected automatically may include usage details, IP addresses, and information collected through cookies and other tracking technologies.

Information You Provide Us

The information we collect on or through the Site or Service may include: 

  • information that you provide by filling in forms on the Site or through the Service. This includes information provided at the time of registering to use the Site, subscribing to the Service, posting material, or requesting further services. We may also ask you for information when you enter a contest or promotion sponsored by us, and when you report a problem with the Site or Service.
  • financial records, files, correspondence, and related personal information or data that is provided, entered, or imported by you, as a user, or by a user acting on your behalf, in connection with such user’s use of the Service (“Data”). 
  • records and copies of your correspondence (including email addresses), if you contact us.
  • your responses to surveys that we might ask you to complete for research purposes.
  • details of transactions you carry out through the Site or Service and of the fulfillment of your orders. You may be required to provide financial information before placing an order or using certain payment processing services available through the Site.
  • your search queries on the Site.

You also may provide information to be published or displayed (hereinafter, "posted") on public areas of the Site, or transmitted to other users of the Site or third parties (collectively, "User Contributions"). Your User Contributions are posted on and transmitted to others at your own risk. Although you may have the option to set certain permission settings through your account, please be aware that no security measures are perfect or impenetrable. Additionally, we cannot control the actions of other users of the Site with whom you may choose to share your User Contributions. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.

Information We Collect by Automatic Means

When you navigate through and interact with the Site, we may use automatic data collection technologies to collect certain information about your equipment, browsing, actions, and patterns, including:

  • information about the devices you use to access the Site (such as the IP address and the type of the device, operating system, and web browser);
  • dates, times, and duration of use of the Site (including whether you are a repeat or first time visitor); 
  • information on actions taken when using the Service (such as page views and website navigation patterns); and 
  • information about your online activities over time and across third-party websites or other online services (behavioral tracking).

In addition, we use third-party web analytics services to help us understand your use of the Site and the popularity of certain content so we can improve your experience. For more information on our use of third-party analytics services, see Third Party Providers below. 

The information we collect automatically is statistical data and does not include personal information, but we may maintain it or associate it with personal information we collect in other ways or receive from third parties. It helps us to estimate our audience size and usage patterns, speed up your experience,  and to improve and personalize the Service, including enabling us to identify and authenticate users. To the extent that we associate any of this non-personal information with your personal information, we will treat it as personal information under the terms of this Privacy Policy.

Technologies we use for automatic data collection may include cookies. A cookie is a small file placed on the hard drive of your computer. Pages of our Site and our emails may also contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit us, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of certain website content and verifying system and server integrity).

Third-Party Use of Cookies and Other Tracking Technologies

Some content or applications on the Site are served by third parties, including content and application providers. These third parties may use cookies alone or in conjunction with web beacons or other tracking technologies to collect information about you when you use our Site. The information they collect may be associated with your personal information or they may collect information, including personal information, about your online activities over time and across different websites and other online services. They may use this information to provide you with interest-based (behavioral) advertising or other targeted content. 

We do not control these third parties' tracking technologies or how they may be used. If you have any questions about any targeted content, you should contact the responsible provider directly.

How We Use the Information We Collect

We may use information we obtain about you, or that you provide to us:

  • to process orders you place and complete other transactions you have requested using the Site or the Service, and provide you with products and services you request;
  • to contact you (including, without limitation, via text message) to authenticate you as a user of the Service or deliver system-related messages, except where you have opted out of receipt of text messages (see Your Choices);
  • to send you information or materials you request;
  • to maintain a record of your purchases and other transactions using the Site or the Service;
  • to respond to your questions and comments and provide customer support;
  • to communicate with you about our products, services, offers, and promotions;
  • to operate, evaluate, and improve our business and the products and services we offer;
  • to analyze trends and statistics regarding use of the Service and transactions conducted using the Service;
  • to protect against and prevent fraud, unauthorized transactions, claims, and other liabilities, and manage risk exposure, including by identifying potential hackers and other unauthorized users;
  • to enforce our Terms of Service and other agreements; 
  • to comply with applicable legal requirements and industry standards; and
  • for any other purpose for which you provide your consent.

We may also use your information to contact you about our own and third parties’ goods and services that may be of interest to you.  If you do not want us to use your information in this way, please email support@getcanopy.com. For more information, see Your Choices.

How We Share Your Personal Information

We may disclose aggregated information about our users, and information that does not identify any individual user, without restriction. 

We may disclose personal information that we collect or you provide (as described in this Privacy Policy):

  • to our subsidiaries and affiliates;
  • to contractors, service providers, and other third parties we use to support our business;
  • to comply with any court order, law, or legal process, including to respond to any government or regulatory request;
  • to enforce or apply our Terms of Service and other agreements;
  • if we believe disclosure is necessary or appropriate to protect the rights, property, or safety of Canopy, users of the Site or Service, and/or others;
  • for any other purpose which is incidental to the normal use of the Service; and
  • for any other purpose for which you provide your consent.

We also reserve the right to transfer your personal and other information to a buyer or other transferee in the event of a merger, divestiture, restructuring, reorganization, dissolution, sale, or other transfer of some or all of our assets.  Should such a sale, merger, or transfer occur, we will use reasonable efforts to direct the transferee to use your information in a manner that is consistent with our Privacy Policy.

Third Party Providers

Without limiting the foregoing, we may also employ third party companies and individuals to facilitate our Site and the Service and to process data, perform Site-related services, provide user support, collect user feedback, or to assist us in analyzing how the Service is used (collectively, “Third Party Providers”). These Third Party Providers may have access to your personal information for purposes of performing these tasks on our behalf, and may have the right to retain and use personal information or other information through performance of these tasks on an aggregated and de-identified basis in accordance with the terms of the applicable Third Party Provider’s privacy policy. We advise you to review the privacy policies of the Third Party Providers, but note that we have no control over and assume no responsibility for the content, privacy policies or practices of any Third Party Providers, their sites or services.

Third Party Providers may include, but are not limited to, the following:

Payment Processors. We use Third Party Providers to process payment transactions initiated via the Service. We currently use the following third party payment processing services:

      • Stripe. If you purchase a subscription to the Service, your purchase may be processed via Stripe. When you make such a purchase, your payment card details are encrypted and securely stored by our third party payment processors to enable Canopy to automatically bill your payment card on a recurring basis. You can learn about Stripe’s privacy practices at https://stripe.com/privacy.
      • Adyen. If your subscription to the Service includes access to Canopy Payments, we may use Adyen to provide those payment processing functionalities to you. You can learn about Adyen’s privacy practices at https://www.adyen.com/policies-and-disclaimer/privacy-policy.

Analytics.  We may use Third Party Providers to monitor and analyze the use of our Site.

      • Google Analytics. Google Analytics is an independent web analytics service offered by Google that tracks and reports website traffic. Google uses the data collected to track and monitor the use of our Site. This data is shared with other Google services. Google may use the collected data to contextualize and personalize the ads of its own advertising network. You can learn about Google’s privacy practices at https://www.google.com/intl/en/policies/privacy.

        You may opt out of the aggregation and analysis of data collected about you on our Site by Google Analytics by downloading the Google Analytics opt-out browser add-on, available at https://tools.google.com/dlpage/. Please note that if you opt out, analytics companies other than Google Analytics may continue to aggregate and analyze data collected about you on the Site.
      • Mixpanel. Mixpanel may be used to track how users interact with our Site. You can learn about Mixpanel’s privacy practices at https://mixpanel.com/legal/privacy-policy/. For information on how you may opt out of the aggregation and analysis of data collected about you on our Site by Mixpanel, please visit https://help.mixpanel.com/hc/en-us/articles/360001113426-Opt-Out-of-Tracking.
      • Hubspot. Hubspot may be used to track and analyze traffic to and from the Site, to communicate with current and prospective users, and to generate potential leads. You can learn about Hubspot’s privacy practices at https://legal.hubspot.com/privacy-policy.  For information on how you may opt out of tracking by Hubspot, please visit https://knowledge.hubspot.com/reports/customize-your-cookie-tracking-settings-and-privacy-policy-alert.
      • Thoughtspot. Thoughtspot may be used to collate and analyze certain data collected through the Service. You can learn about Thoughtspot’s privacy practices at https://www.thoughtspot.com/privacy-statement.
      • Fullstory. Fullstory may be used to analyze the digital experience of visitors to the Site. You can learn about Fullstory’s privacy practices at https://www.fullstory.com/legal/privacy-policy.  For information on how you may opt out of the capture and analysis of your website usage data by Fullstory, please visit https://www.fullstory.com/optout/.

Other Service Providers. We also use Third Party Providers for marketing, technical, operational, and other services, including as follows:

      • Bandwidth. Bandwidth may be used to support the multi-factor authentication of users via text message and, where applicable, to otherwise communicate with users via text message. You can learn about Bandwidth’s privacy practices at https://www.bandwidth.com/privacy/
      • ProfitWell. Profitwell may be used to track and analyze user subscriptions and payments with respect to the Service. You can learn about Profitwell’s privacy practices at https://www.profitwell.com/privacy-policy.
      • OpenAI. OpenAI may be used to generate emails, to automate tasks, and to allow users to accelerate certain processes. You can learn about OpenAI’s privacy practices at https://openai.com/policies/privacy-policy.

Security

Canopy takes protecting your information seriously, and implements reasonable measures to secure your personal information from accidental loss and from unauthorized access, use, alteration, and disclosure.  However, the safety and security of your information also depends on you. Where we have given you (or where you have chosen) a password for access to the Service or certain parts of the Site, you are responsible for keeping this password confidential. We ask you not to share your password with anyone. We urge you to be careful about giving out information in public areas of the Site like message or comment boards. The information you share in public areas may be viewed by any user of the Site.

Please note that the electronic transmission of information is not completely secure. We cannot guarantee that the security measures we have in place to safeguard Data and/or other information will never be defeated or fail, or that such measures will always be sufficient or effective. Any transmission of Data and/or other information is at your own risk.

Information and Data Transfers

The Service is administered by Canopy in the United States. When we obtain information about you through your access to or use of the Site or Service or when you input or import Data to the Service from somewhere other than the United States, we may transfer, process, and store such information and Data in the United States. If you access the Site and/or Service from outside the United States, you do so on your own initiative, at your sole risk, and you are responsible for compliance with all applicable laws. If you are a non-United States resident and provide us with your personal information, or if you use the Service, you consent to the transfer to and processing of such information and any Data in the United States, which may have data protection laws less stringent than those in the country in which you reside. Additionally, if any Data or other information you provide to us includes the personal information of your clients, you confirm that you have all necessary authority and consents to transfer such Data to us.

Your Choices

We strive to provide you with choices regarding the personal information you provide to us. We have created mechanisms to provide you with the following control over your information:

Cookies. You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. If you disable or refuse cookies, please note that some parts of the Site and the Service may then be inaccessible or not function properly.

Emails. Canopy sends billing information, product information, Service updates, Service notifications, and other communications to you via email. Promotional email communications will contain instructions describing how you can opt out of receiving future promotional emails from us. If you opt out of promotional emails, you may continue to receive non-promotional, transactional emails from us.

Text Messaging. Canopy may contact you via text message in connection with its multifactor user authentication or, where applicable, regarding other Service-related issues. You can opt out of receiving text messages from us at any time by changing your user preferences on the Site. 

Limiting Provided Information. You can choose not to provide us with certain information. If you decline to provide certain information, however, please note that some features of the Site and/or Service may then be inaccessible.

How We Respond to Do Not Track Signals

Your web browser may let you choose your preference as to whether you want to allow the collection of information about your online activities over time and across different websites or online services. At this time, the Service does not respond to the preferences you may have set in your web browser regarding such collection of your information, and we may continue to collect information in the manner described in this Privacy Policy.

Third Party Applications and Websites

The Site and/or Service may contain links enabling the electronic transfer of data from third-party applications to the Site or Service, as well as links to third-party websites. Canopy is not responsible for the privacy practices or content of these applications or websites, and linking to an application or website does not constitute endorsement by us of that application or website. You should review the privacy policy and terms and conditions of any such third-party application or website prior to using or providing information to the same.

Accessing and Correcting Your Information

Your personal information is accessible through, and may be reviewed and changed by logging in to, your user account. You may also send us an email at support@getcanopy.com  to request access to, correct, or delete any personal information that you have provided to us. We may not accommodate a request to change information if we believe the change would violate any law or legal requirement or cause the information to be incorrect. If you are a registered user of the Service, you can also review and change your personal information by logging into the Service and visiting your user account profile page.

If you delete your User Contributions from the Site, copies of your User Contributions may remain viewable in cached and archived pages, or might have been copied or stored by other Site users. Proper access and use of information provided on the Site and Service, including User Contributions, is governed by our Terms of Service.

Privacy of Children

The Site and Service are not intended for or directed to children. No one under age 13 (or, with respect to residents of Europe or where so required by applicable law, under age 16) (the “Consent Age”) may provide any information to or on the Site or Service. Canopy does not knowingly collect or solicit personal information from children under the Consent Age. If you are under the Consent Age, do not use or provide any information on the Site or through the Service or any of its features, register on, make any purchases through, or use any of the interactive or public comment features of the Site or Service, or provide any information about yourself to us, including your name, address, telephone number, email address, or any screen name or user name you may use. If we learn we have collected or received personal information from a child under the Consent Age, we will delete that information. If you believe we might have any information from a child under the Consent Age, please contact us at legal@getcanopy.com. Notwithstanding the foregoing, Canopy may store information about dependents under the Consent Age in connection with the Service where consented to by the appropriate parent or guardian.

Your California Privacy Rights

California law grants additional privacy rights to California residents. In particular, the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (“CCPA”) requires businesses to disclose, for the past 12 months, (i) the categories of personal information collected, (ii) the categories of sources of the collected personal information, (iii) the purposes for which the collected personal information is used, (iv) the categories of personal information disclosed for a business purpose, (v) the categories of any personal information sold or shared, and (vi) the categories of third parties to whom information was disclosed for a business purpose, sold, or shared. Under the CCPA, a “sale” means the disclosure of personal information in exchange for anything of value, and “sharing” means the disclosure of personal information for online targeted advertising. Canopy provides the relevant disclosures in the following table. (Note that Canopy does not sell any personal information, even under the broad CCPA definition of a “sale.”)

Category

Sources of Collection

Purposes of Collection

Disclosures for a Business Purpose

Sharing with Third Parties

Category

Identifiers

Sources of Collection

Site visits, creation of accounts and registration for Canopy products and services, importation or upload by users of the Service

Purposes of Collection

For customer registration and authentication, to enable Canopy to provide its products and services and to allow Canopy to communicate with you

Disclosures for a Business Purpose

To Third Party Providers to assist in providing Canopy products and services and processing associated payments

None

Sharing with Third Parties

None

Category

Personal information categories listed in the California Customer Records statute

Sources of Collection

Creation of accounts and registration to receive Canopy products and services, submission of payment information, importation or upload by users of the Service

Purposes of Collection

For customer registration and authentication, to enable Canopy to provide its products and services and to allow Canopy to communicate with you

Disclosures for a Business Purpose

To Third Party Providers to assist in providing Canopy products and services and processing associated payments

None

Sharing with Third Parties

None

 

Category

Commercial information

Sources of Collection

Registration for Canopy products and services, importation or upload by users of the Service

Purposes of Collection

To provide Canopy products and services to customers and maintain purchase history

Disclosures for a Business Purpose

To Third Party Providers to facilitate delivery of products and services

None

Sharing with Third Parties

None

 

Category

Internet or other electronic network activity

Sources of Collection

Your browsing and search history on our Site and Service and other interactions with our Site or Service

Purposes of Collection

To improve the visitor experience on the Site, diagnose server problems and administer the Site, and to improve Service function

Disclosures for a Business Purpose

To Third Party Providers for the purpose of enhancing the Site and improving the effectiveness of our advertising

None

Sharing with Third Parties

None

 

Category

Geolocation data

Sources of Collection

IP address

Purposes of Collection

To improve the visitor experience on our Site

Disclosures for a Business Purpose

To Third Party Providers for the purpose of enhancing our Site and improving the effectiveness of our advertising

None

Sharing with Third Parties

None

 

Category

Professional or employment related information

Sources of Collection

Registration for Canopy products and services, importation or upload by users of the Service

Purposes of Collection

For customer registration, to enable Canopy to provide its products and services

Disclosures for a Business Purpose

To Third Party Providers to assist in providing Canopy products and services

None

Sharing with Third Parties

None

 

Category

Inferences drawn from other personal information

Sources of Collection

Your browsing and search history on our Site and other interactions with our Site and Service

Purposes of Collection

To improve the visitor experience on our Site

Disclosures for a Business Purpose

To Third Party Providers for the purpose of enhancing our Site

None

Sharing with Third Parties

None

 

 

Some of the categories of personal information listed above are considered sensitive personal information under the CCPA. We do not use or disclose sensitive personal information, as defined by the CCPA, for purposes other than those specified in the CCPA.

We retain personal information that we collect for as long as we need to use it in connection with our business and in accordance with our standard practices or in compliance with applicable laws. When we no longer need the personal information, we will deidentify, aggregate, or delete this information where required by law.

California residents also have the rights described below, subject to certain exceptions and limitations. We will not discriminate against any California resident who exercises these rights.

  • Right to access/know. You may request from us a list of (i) the categories and, in some cases, specific pieces of personal information that we have collected about you, (ii) the categories of sources from which we collected that information, (iii) our purposes for collecting, selling, or sharing personal information about you, and (iv) the categories of third parties to whom we have disclosed personal information. You have the right to up to two (2) access requests each twelve (12) months.
  • Right to delete. You may request, at any time, that we delete  the personal information we have collected about you and direct our service providers to delete the information from their records.
  • Right to correct. You may request that we correct inaccuracies in the information we have collected about you. 
  • Right to opt out of sharing. You may opt out of the sharing of personal information for cross-context behavioral advertising purposes.  Please note that if you opt out of certain practices, we may be unable to provide you with some services.  Additionally, we do not knowingly sell or share personal data of individuals under 16.

You may contact us to exercise these rights at legal@getcanopy.com. To ensure the privacy and protection of individuals, we are required to verify your identity (or that of your authorized agent) or otherwise authenticate your request(s), which we will do in accordance with the CCPA regulations. We will require you to provide, at a minimum, your email address and full name.

Your European Privacy Rights

If you are a resident of the European Union, you are entitled to certain information and have certain rights under the General Data Protection Regulation (Regulation (EU) 2016/679) (the “GDPR”). Those rights include:

  • the right of access to your information.
  • the right to rectify your information if it is incorrect or incomplete.
  • the right to have your information erased (“right to be forgotten”) if certain grounds are met.
  • the right to withdraw your consent to our processing of your information at any time (if our processing is based on consent).
  • the right to object to our processing of your information (if processing is based on legitimate interests).
  • the right to object to our processing of your information for direct marketing purposes.
  • the right to receive your information from us in a structured, commonly used and machine-readable format, and the right to transmit your information to another controller 
    without hindrance from us (data portability).

If you are located in the European Union and you are or have been a user of our services (including the Service), we may send you marketing communications based on our legitimate interests, subject always to your right to opt out of such communications. Further, if you are located in the European Union, we will never share your information with a third party for such third party’s marketing purposes, unless you have specifically consented to us doing so.

You may contact us at legal@getcanopy.com to exercise any of the above rights. We may request specific information from you to confirm your identity, and in some circumstances, we may charge a reasonable fee for access to your information.

Furthermore, if you believe that our processing of your information is inconsistent with your data protection rights under the GDPR and we have not adequately addressed your concerns, you have the right to lodge a complaint with the data protection supervisory authority of your country.

For purposes of the GDPR, we are a “controller” and you are a “data subject.”

Updates to Our Privacy Policy

Canopy reserves the right to change this Privacy Policy at any time. If we make a material change to this Privacy Policy, we will make an effort to communicate these changes to you via email or by posting a notification on the Site. The date this Privacy Policy was last revised is at the top of this page. We encourage you to review this Privacy Policy periodically to check for any updates or changes.

Treatment of Google User Data

Notwithstanding anything to the contrary herein, if you provide the Service access to certain types of your Google data, the Service’s use of that data will be subject to these additional restrictions:

The Service will only use access to read, write, modify or control Gmail message bodies (including attachments), metadata, headers, and settings to provide a web email client that allows users to compose, send, read, and process emails and will not transfer this Gmail data to others unless doing so is necessary to provide and improve these features, comply with applicable law, or as part of a merger, acquisition, or sale of assets.

The Service will not use this Gmail data for serving advertisements.

The Service will not allow humans to read this data unless we have your affirmative agreement for specific messages, doing so is necessary for security purposes such as investigating abuse, to comply with applicable law, or for the Service’s internal operations and even then only when the data have been aggregated and anonymized.

Contact Us

If you have any questions about this Privacy Policy or our information practices, please email us at  legal@getcanopy.com or write to us at:

Canopy
380 Data Dr. Suite 300
Draper UT 84020